Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
File:                     E0CE223E347911F08105690CC4F9AE02.roa (raw, json)
Hash identifier:          7827Ww6PbWPIoxtdGUYlZ4pJVXlagCKayUyN+/5jUs0=
Subject key identifier:   70:09:C1:7E:E9:62:FE:AC:C0:61:0F:BC:06:4F:E1:EC:22:1E:FF:64
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       0FED
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
Signing time:             Mon 19 May 2025 08:43:00 +0000
ROA not before:           Mon 19 May 2025 08:43:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138981
IP address blocks:        103.138.24.0/22 maxlen: 22
                          103.138.26.0/23 maxlen: 23
                          103.138.26.0/24 maxlen: 24
                          103.138.27.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 20 May 2025 14:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4077 (0xfed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: May 19 08:43:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=682aef14-08fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:92:24:f5:aa:12:9c:ad:b2:04:e9:14:30:
                    7c:47:a9:17:a2:25:4e:f1:25:96:bf:40:03:2a:9d:
                    4c:fc:46:1e:cb:dd:6a:e6:99:de:21:2e:2e:46:e4:
                    04:90:5c:d5:64:d0:a9:6e:e1:26:f4:17:4d:99:e2:
                    d7:a0:19:f0:b2:58:5b:ce:d7:b3:75:4a:71:9d:bd:
                    43:23:6a:46:ec:22:53:58:6f:c6:70:3c:96:18:74:
                    ee:74:39:c0:01:4d:71:f8:da:28:9e:44:12:67:b6:
                    a3:67:89:34:6e:f5:4e:16:17:f7:a8:0e:a3:06:db:
                    98:b8:84:b4:d1:b4:2a:8d:f7:3e:c6:8a:e1:77:ae:
                    37:7a:b1:d0:72:48:0e:f9:2d:85:55:cf:fb:61:40:
                    a6:9d:49:49:3b:cb:20:dd:94:2f:06:6b:dd:a6:ab:
                    cb:cb:60:86:d5:20:fb:2b:53:53:af:0b:54:15:bb:
                    fd:c6:60:1d:a8:a2:cb:a2:23:0a:3e:0e:f3:0c:48:
                    fc:ea:7d:a6:cb:87:29:b7:f3:b1:9c:13:33:5d:79:
                    50:2b:05:9d:6f:0f:4c:0c:d1:5a:01:af:2b:32:3b:
                    3a:54:f6:1c:3b:64:3f:17:ee:1a:ec:04:70:3f:c3:
                    cb:5d:ce:f1:f5:2a:98:35:aa:71:d3:3a:78:36:e5:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:C1:7E:E9:62:FE:AC:C0:61:0F:BC:06:4F:E1:EC:22:1E:FF:64
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:12:b3:74:46:46:be:11:51:db:7c:0e:5c:34:cf:f7:21:
         9f:05:2a:49:ba:60:5b:18:f7:80:3b:5d:37:ee:f3:51:91:91:
         42:26:72:31:e9:d6:6e:21:02:f7:ca:b9:cb:ab:ae:e9:a1:68:
         7a:1b:e2:79:bc:4a:b0:8b:b3:57:85:cc:0c:85:dd:fa:22:e9:
         33:2c:60:7c:99:f4:ac:db:fd:e0:28:8e:39:2e:12:1e:a8:3c:
         b6:65:60:5c:64:c4:e7:08:08:df:c2:6f:ec:ec:96:c1:db:22:
         09:75:7a:05:f8:94:4f:9a:11:b3:44:e8:5f:ae:d6:99:98:66:
         de:7d:c0:48:50:c7:f4:2b:b1:ab:64:1c:1f:59:f5:c3:3f:8a:
         74:ce:ad:35:5d:4b:ad:c9:81:08:79:c0:98:95:6a:18:c9:ea:
         4a:35:11:0a:23:0d:b7:0f:73:12:4b:57:c4:85:7d:17:d7:69:
         3b:a6:44:96:45:aa:6e:b4:fe:16:ba:03:04:6f:d0:ce:71:8c:
         94:0a:13:d2:26:0e:13:85:1c:20:9c:72:fe:5e:43:61:6a:52:
         bf:c0:6e:96:34:f8:02:17:67:29:22:cc:f8:e5:ce:42:d9:f3:
         e7:0a:96:95:a6:22:22:9d:31:10:83:ac:45:28:6c:47:d8:1a:
         54:5d:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:20:40 2025 by rpki-client